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METHOD FOR CONTROLLING A FUEL CELL SYSTEM AND SYSTEMS FOR 

EXECUTING THE METHOD 

[0001] The present invention relates to a method for controlling a fuel cell system and 
systems for executing the method as recited in the preamble of Claims 1, 3, 5, and 10. 

[0002] Fuel cells are composed of an anode side and a cathode side, each having a channel 
system for fluids. A membrane electrode assembly (MEA) separates the anode side from the 
cathode side. For generating electric power, the channel systems may be supplied with 
specific gases. In a preferred embodiment of a fuel cell, hydrogen flows through the anode 
space and a compressor makes oxygen or air flow through the cathode space. If hydrogen is 
produced from a hydrocarbon in a reformer unit situated upstream from the anode side of the 
fuel cell, this may take place using a low-pressure system or a high-pressure system. In low- 
pressure systems, the anode side of a fuel cell is directly flushed by the reformer gas flow. 

[0003] Hydrogen separation technologies, in particular diaphragm modules, are used in high- 
pressure systems in which pure hydrogen is separated from a gas mixture via separation 
diaphragms. The greater the pressure differential between the two sides of the particular 
diaphragm and the thinner the foil-type diaphragm, the more efficiently operate the 
separation diaphragms. The danger in the case of high-pressure differentials and thin foils is 
that the diaphragm ruptures, so that pressure compensation takes place between the high- 
pressure area of the reformer unit and the anode space of the fuel cell. However since the 
cathode side still remains on the compressor pressure level, a pressure differential is 
established across the membrane electrode assembly. The membrane electrode assembly may 
be damaged if this pressure differential exceeds a design-specific value, which may result in 
complete failure of a fuel cell. 



[0004] A fuel cell system having a pressure adjustment and a control method are described in 
Unexamined Patent Application DE 101 07 019 Al. In this system, a reformer unit for 
producing hydrogen-containing reformer gas is connected to at least one fuel cell. Devices 
for adjusting the operating pressure are assigned to the reformer unit and to the fuel cell. At 
least one of the devices, in particular a throttle device or an expander, for adjusting the 
operating pressure is connected between the reformer unit and the anode side of the fuel cell 
The system and the control method cause targeted decoupling of the operating pressures of 
the reformer unit and the fuel cell. The devices for adjusting the operating pressure ensure the 
required pressure conditions in normal operation of the fuel cell. 

[0005] Feed lines and discharge lines for a fuel and an oxidation agent are provided in the 
anode part and the cathode part of the fuel cell according to DE 100 10 394 Al . Pressure 
regulators, which are coupled to one another, are situated in the discharge lines so that an 
exchange of the pressure values takes place between the pressure regulators during normal 
operation of the fuel cell. 

[0006] In the fuel cell system according to DE 100 41 125 Al, an anode circuit and a cathode 
circuit are connected via a connecting line, a controllable valve system being situated in the 
connecting line for pressure compensation during warm-up operation and during normal 
operation. 

[0007] A method for detecting perforations in a diaphragm of an electrochemical cell is 
described in DE 697 04 571 T2 in which the exothermally generated heat is detected when a 
reactant fluid of a high-pressure side impinges on a reactant fluid on the low-pressure side 
and both reactant fluids react generating heat. Using catalysts may accelerate the exothermal 
reaction. The signal generated by the heat detector may be used to signal the damage to the 
cell. 

[0008] JP 60-007 065 Al describes a fuel cell system in which differential pressure sensors 
are provided on both the anode side and the cathode side. If differential pressure limiting 
values are exceeded on the anode side or the cathode side, a computer-controlled outlet valve 
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is opened on the anode side or the cathode side. 



[0009] With regard to rapidity and reliability, the known fuel cell systems are not designed to 
control the pressure conditions in the event of malfunction. This is true in particular in high- 
pressure systems. 

[0010] The object of the present invention is to develop a method for controlling a fuel cell 
system and systems for executing the method which, when a high-pressure gas-generating 
system is used, reliably prevent mechanical damage to a fuel cell in the event of gas break- 
through to the low-pressure side. 

[0011] The object is achieved using the method having the features of Claim 1. The method 
is executed using systems having the features of Claims 3,5, and 10. Advantageous 
embodiments arise from the subclaims. 

[0012] In the method according to the present invention, the pressure conditions in a 
reformer unit, as well as in the connected fuel cells, are taken into account. Due to the fact 
that in the event of malfunction, i.e., bursting of the reformer unit diaphragm, the differential 
pressure between the side of the reformer unit diaphragm facing the anode side and the 
cathode side of the fuel cell module is held below a predefined value, mechanical damage to 
the membrane electrode assemblys may be prevented. 

[0013] In an advantageous system for executing the method, the volume for the circulation of 
fluids on the high-pressure side of a reformer unit is substantially smaller than the volume for 
the circulation of fluids on the low-pressure side of the reformer unit and the fuel cell. In the 
event of a breakthrough of the reformer unit diaphragm, the pressure, volume, and 
temperature are equalized in the overall system composed of the high-pressure side and the 
low-pressure side including the anode space of the fuel cells. The mixture pressure 
established is always lower than the critical overpressure toward the cathode side of the 
particular fuel cell, so that the membrane electrode assemblys between the anode sides and 
the cathode sides of the fuel cells are not damaged. A small volume on the high-pressure side 
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is advantageous for the system dynamics. A large volume on the low-pressure side may 
advantageously be used as a hydrogen buffer for load change conditions. 

[0014] In a further advantageous system for executing the method, a pressure relief valve 1 is 
situated in the connection between the low-pressure area of the diaphragm module of a 
reformer unit and the anode side of at least one fuel cell. In the event of rupture of the 
reformer unit diaphragm, the pressure relief valve is quickly opened and the pressure is 
released into the atmosphere. Damage to the membrane electrode assembly s of the fuel cells 
is thus prevented. The pressure relief valve may be controlled by an actuator whose actuating 
signals are formed in a control device using sensors which detect the pressure on the low- 
pressure side of the reformer unit diaphragm or the carbon monoxide or carbon dioxide 
concentration. A bursting disk may also be provided instead of the pressure relief valve. If it 
is anticipated that, in the event of a malfunction, pressure equalization does not take place 
quickly enough, pressure equalization in the anode space of a fuel cell may be delayed via a 
flow resistance, the flow resistance being situated upstream from the anode space. 

[0015] In a variant of the system for executing the method, a shut-off valve, able to be shut 
in the event of rupture of the diaphragm in the diaphragm module, may additionally be 
situated in the connection between the low-pressure side of the diaphragm module of a 
reformer unit and the anode space of a fuel cell. 

[0016] The present invention is explained in greater detail below on the basis of exemplary 
embodiments. 

[0017] Figure 1 shows a schematic representation of a fuel cell system including a 
reformer unit, 



1 Translator's Note: "Pressure relief valve" for the sake of consistency. The German alternates between 
"Oberdruckventil" and "Sicherheitsventil." 



[0018] Figure 2 shows a schematic representation of a protection system for a diaphragm 
electrode unit using a bursting disk, 

[0019] Figure 3 shows a schematic representation of an active anode protection system 
using a controllable valve, and 

[0020] Figure 4 shows a schematic representation of an active anode protection system 
using a controllable valve in combination with a flow resistance. 

[0021] Figure 1 shows a schematic representation of a fuel cell system for carrying out the 
method. The core of the fuel cell system is composed of a reformer unit 1 and a fuel cell unit 
2 which are each indicated by dash-two-dots lines 

[0022] Reformer unit 1 contains a reformer 3 and a diaphragm module 4. Reformer 3 is 
connected to a fuel tank 7 such as a gasoline tank, a diesel tank, or a methanol tank, for 
example, via a line 5 and a controllable valve 6. Furthermore, reformer 3 is connected to a 
water tank 10 via a line 8 and a controllable valve 9. Finally, reformer 3 is connected to a 
compressor 12 having a suction line 13 via a line 11. The outlet of reformer 3 is connected to 
diaphragm module 4. Diaphragm module 4 contains a diaphragm 14 which separates the fuel 
cell system into a high-pressure area 15 and a low-pressure area 16, adjoining one another, 
schematically depicted in Figure 1 by dash-dot lines. A pressure-retaining valve 17 is 
connected to the high-pressure side of diaphragm module 4. 

[0023] Fuel cell unit 2 contains a fuel cell battery made up of fuel cell modules. Figure 1 
shows only one fuel cell module composed of an anode side 18 and a cathode side 19 which 
are separated from one another by a membrane electrode assembly 20. Anode side 18 is 
connected to the low-pressure side of diaphragm module 4 via a line 21. A flow resistance 22 
is integrated into line 21. On the inlet side, cathode side 19 is connected to a compressor 23 
having a suction line 24. On the outlet side, anode side 1 8 and cathode side 19 are connected 
to line 21 and water tank 10. Two current leads 25, 26 run from membrane electrode 
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assembly 20 to a consumer 27. 

[0024] A sensor 28 and, in parallel to it, a controllable pressure relief valve 29 are integrated 
into line 21 upstream from flow resistance 22. Valves 6, 9, an actuator 30 for pressure relief 
valve 29, compressors 12, 23, and sensor 28 are connected to a control device 31. Arrows 32 
in lines 33, depicted by dashed lines, which run to control device 31, indicate the signal flow 
directions. 

[0025] During normal operation of the fuel cell system, valves 6, 9 are open, compressors 12, 
23 are in action, and pressure relief valve 29 is closed. From the hydrocarbon-containing fuel 
of fuel tank 7 such as gasoline, diesel, or methanol, for example, the water of water tank 10, 
and the oxygen of the air pumped into reformer 3 by compressor 12, a hydrogen-rich gas 
mixture is produced in reformer 3 by reforming. Reformer 3 is a high-pressure system, i.e., 
the pressure of the gas mixture in reformer 3 and on the high-pressure side of diaphragm 
module 4 is substantially higher than the pressure of the oxygen-containing air on cathode 
side 19 of fuel cell unit 2 which is built up by compressor 23. Pressure-retaining valve 17 on 
the high-pressure side of diaphragm module 4 ensures constant high pressure. Corresponding 
to the general gas law, a situation is established in high-pressure area 15 in which the 
pressure is proportional to a quotient formed by the volume of high-pressure area 15 and the 
temperature. Hydrogen, which accumulates on the low-pressure side of diaphragm 14, is 
separated from the hydrogen-rich gas mixture by diaphragm module 4. An electrochemical 
reaction takes place in fuel cell unit 2 between hydrogen on the anode side 18 and 
atmospheric oxygen on the cathode side 1 9, thereby creating an electromotive force which 
causes current I flow through consumer 27. During the electrochemical reaction, water is 
produced on cathode side 19 which may be routed back to water tank 10 via line 34, depicted 
with a dashed line. Likewise, unused hydrogen on the anode side may be routed back to the 
inlet of anode side 18 via line 35, depicted with a dashed line. The pressures in line 21 are 
roughly equal on both sides of flow resistance 22, so that almost no pressure drop exists 
upstream of flow resistance 22. The pressure in line 21, i.e., low-pressure area 16, is 
constantly monitored using sensor 28. The carbon monoxide or carbon dioxide content may 
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be monitored using sensor 28 as an alternative. 

[0026] If diaphragm 14 in diaphragm module 4 bursts, a new pressure balance occurs in 
high-pressure area 15 and low-pressure area 16. In this event of malfunction, the high- 
pressure from high-pressure area 15 is released into low-pressure area 16. Without the 
measures according to the present invention, a differential pressure would exist between 
anode side 18 and cathode side 19 of fuel cell unit 2, which would result in damage to 
membrane electrode assembly 20. 

[0027] Different measures according to the present invention are implemented which, 
individually or in combination, prevent the destruction of membrane electrode assembly 20. 

[0028] As a first measure, the volumes in high-pressure area 15 and low-pressure area 16 
may be dimensioned such that, in the event of diaphragm 14 bursting, a mixture pressure is 
established which is lower than the critical overpressure toward cathode side 19. This may be 
achieved by dimensioning the volume in high-pressure area 1 5 as small as possible compared 
to the volume of low-pressure area 16. If the volume in low-pressure area 16 is dimensioned 
to be six to eight times larger than in high-pressure area 15, then, in the event of diaphragm 
14 bursting, a pressure increase by a factor of only 1 .4 to 1.1 results in the total volume 
formed from the volumes of reformer 3, diaphragm module 4, anode side 18 of fuel cell unit 
2, and the associated pressure-connected elements such as line 21, sensor 28, pressure relief 
valve 29, and flow resistance 22. This moderate pressure increase poses no danger for 
membrane electrode assembly 20.The pressure differential between anode side 18 and 
cathode side 19 of fuel cell unit 2 does not exceed a critical threshold of typically 500 mbar. 

[0029] As a further measure, the signal of sensor 28 may be used for detecting the ruptured 
state of diaphragm 14. Bursting of diaphragm 14 results in rapid pressure increase in low- 
pressure area 16 which may be detected by sensor 28 which responds to rapid pressure 
changes. When diaphragm 14 bursts, the reformer gas continues to flow unobstructed into 
anode side 1 8 of fuel cell element 2. However, the reformer gas contains a high concentration 
of carbon monoxide and carbon dioxide which is detectable by a sensor 28 for detecting 
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carbon monoxide or carbon dioxide. The signal of sensor 28 is analyzed in control device 3 1 
and an actuating signal is generated for actuator 30. Signal processing in control device 3 1 
takes place at such high speed that the overpressure in low-pressure area 16 is reliably 
reduced. The actuating signal at actuator 30 causes a rapid opening of pressure relief valve 
29. The pressure increase cannot continue to anode side 18, whereby membrane electrode 
assembly 20 is protected. 

[0030] A variant having a bursting disk 36 in line 21 is shown in Figure 2. Otherwise, the 
fuel cell system has the design described in Figure 1. Bursting disk 36 functionally 
substitutes sensor 28 and pressure relief valve 29 of Figure 1. At an unacceptably high 
pressure, such as occurs in low-pressure area 16 when diaphragm 14 is ruptured, bursting 
disk 36 is ruptured so that the overpressure dissipates into the atmosphere. As described in 
connection with Figure 1, the pressure increase cannot continue to anode side 18, whereby 
membrane electrode assembly 20 is also protected. 

[0031] In the method as recited in Claim 1, as well as in the method as recited in Claim 2, 
flow resistance 22 is used to prevent damage to membrane electrode assembly 20 while 
pressure decreases. In the event of rupture of diaphragm 14, flow resistance 22 causes a delay 
of pressure equalization on anode side 18 of fuel cell unit 2. Fuel cell unit 2 is operated at 
low pressure, i.e., the volume flow in stationary normal operation is proportional to the 
hydrogen consumption on anode side 18. Because the volume flow in high-pressure area 15 
contains all remaining gases in addition to unseparated hydrogen, the volume flow is 
substantially larger than in low-pressure area 16. According to the general gas law, the 
volume flow in the high-pressure area is accordingly small under high operating pressure. 
When diaphragm 14 bursts, the volume flow in the event of malfunction is released into 
anode side 1 8 of fuel cell unit 2 and thereby increases. Flow resistance 22 is designed in such 
way that it allows for a minimal pressure drop during normal operation and a very high 
pressure drop in the event of damage in order to be able to dissipate the gas flow in space and 
time via pressure relief valve 29 or bursting disk 36 and to simultaneously ensure minimal 
pressure increase in anode side 18. 
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[0032] Based upon Figure 3, a further measure involving active anode protection is 
explained. The fuel cell system shown in Figure 3 essentially represents the system shown in 
Figure 1, with the exception that, instead of flow resistance 22, a controllable valve 37 
having an actuator 38 is provided in line 21. As described above, rupture of diaphragm 14 is 
detected by sensor 28. The signal of sensor 28 is processed in control device 31. Actuating 
signals for actuators 30, 38 are generated in control device 31. The actuating signal at 
actuator 38 initially causes valve 37 to be shut off thereby interrupting the connection 
between anode side 1 8 and diaphragm module 4 and protecting membrane electrode 
assembly 20. Pressure relief valve 29 is simultaneously or subsequently opened via the 
actuating signal at actuator 30 so that the gas mixture is blown off into the atmosphere. Of 
course, pressure relief valve 29 and valve 37 may be combined into a three-way valve so that 
the hydrogen path is diverted directly into the atmosphere. 

[0033] Figure 4 shows a variant which is a combination of a bursting disk 36 according to 
Figure 2 or a pressure relief valve 29 according to Figure 3 with a flow resistance 22 and a 
controllable valve 37 connected in series in line 21 . In the event rupture of diaphragm 14, 
flow resistance 22 prevents rapid pressure increase on the anode side of fuel cell unit 2 as a 
function of the pressure differential between high-pressure area 15 and low-pressure area 16. 
If the pressure on the anode side 1 8 becomes too high, valve 37 is shut off by control device 
31, thereby preventing an overpressure in fuel cell unit 2. If the pressure in line 21 upstream 
from flow resistance 22 rises too rapidly to an inadmissibly high value, bursting disk 36 
bursts or a pressure relief valve 29 vents in place of bursting disk 36. According to this 
variant, a double, redundant protection of fuel cell unit 2 is provided against overpressure in 
low-pressure area 16 due to the rupture of diaphragm 14. 

[0034] All measures for protecting membrane electrode assembly 20 have in common the 
fact that in the event of rupture of diaphragm 14 the supply of non-reformed fuel such as 
methane, methanol, diesel, or gasoline, as well as the supply of water and air are interrupted 
by control device 3 1 which, if needed, shuts off valves 6, 9 and/or shuts down compressors 
12, 23. This reliably prevents membrane electrode assembly 20 from bursting or being 
contaminated. 
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